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AMENDMENTS TO THE CLAIMS 

1. (Currently amended) A method for data protection, 
comprising : 

accepting data for storage from one or more data 
sources ; 

sending the data for storage in a primary storage 
device located at a local site, and in a secondary storage 
device located at a remote site ; 

while awaiting an indication of successful storage of 
the data in the secondary storage device, temporarily 
storing a record associated with the data in a disaster- 
proof storage unit ad j accnt — fee — fe^-e — primary — storage — device 
collocated with the primary storage device at the local 
site ; and 

when an event damaging at least some of the data in 
the primary storage device occurs, reconstructing the data 
using the record stored in the disaster-proof storage unit 
and at least part of the data stored in the secondary 
storage device. 

2. (Original) The method according to claim 1, wherein 
temporarily storing the record comprises sending an 
acknowledgement to the one or more data sources 
responsively to a successful caching of the record in the 
disaster-proof storage unit, without waiting to receive 
the indication of the successful storage of the data in 
the secondary storage device, so as to reduce a 
transaction latency associated with the storage of the 
data . 

3. (Original) The method according to claim 1, wherein 
temporarily storing the record comprises receiving an 
acknowledgement from the secondary storage device 
acknowledging the successful storage of the data in the 
secondary storage device, and deleting the record from the 
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disaster-proof storage unit responsively to the 
acknowledgement . 

4. (Original) The method according to claim 1, wherein 
reconstructing the data comprises retrieving the disaster- 
proof storage unit following the event, extracting the 
record from the disaster-proof storage unit and writing 
the data associated with the record to the secondary 
storage device. 

5. (Original) The method according to claim 4, wherein 
writing the data comprises remotely connecting the 
disaster-proof storage unit to the secondary storage 
device . 

6. (Original) The method according to claim 1, wherein 
the disaster-proof storage unit comprises a removable 
memory device for holding the record, and wherein 
reconstructing the data comprises, when the disaster-proof 
storage unit is damaged by the event, removing the memory 
device from the disaster-proof storage unit and installing 
the memory device in another unit for readout of the 
record . 

7. (Original) The method according to claim 1, and 
comprising detecting the event using a detection mechanism 
in the disaster-proof storage unit, and modifying 
operation of the disaster-proof storage unit responsively 
to detecting the event. 

8. (Original) The method according to claim 7, wherein 
detecting the event comprises detecting at least one of a 
loss of external electrical power supply and a 
communication failure at the disaster-proof storage unit. 

9. (Original) The method according to claim 7, wherein 
modifying the operation comprises transmitting the record 
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from the disaster-proof storage unit over a wireless 
communication link . 

10. (Currently amended) The method according to claim — 1- 
claim 9 , wherein temporarily storing the record comprises 
storing the record in two or more disaster-proof storage 
units, and wherein transmitting the record comprises 
transmitting two or more different parts of the record 
respectively from the two or more disaster-proof storage 
units over respective wireless links so as to shorten a 
transmission time of the record. 

11. (Original) The method according to claim 7, wherein 
modifying the operation comprises transmitting a homing 
signal from the disaster-proof storage unit, so as to 
enable location and retrieval of the disaster-proof 
storage unit. 

12. (Currently amended) The method according to claim 1, 
wherein reconstructing the data comprises: 

sensing an environmental condition using an 
environmental sensor ; 

prior to occurrence of the event, predicting the 
event responsively to the sensed environmental condition; 
and 

after predicting the event, transmitting the record 
from the disaster-proof storage unit using at least one of 
a wired connection and a wireless connection. 

13. (Original) The method according to claim 12, wherein 
sensing the environmental condition comprises accepting a 
manual indication from a user that indicates the event. 

14. (Original) The method according to claim 12, wherein 
temporarily storing the record comprises sending an 
acknowledgement message responsively to a successful 
storage of the record in the disaster-proof storage unit, 
and comprising, after predicting the event, refraining 
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from sending subsequent acknowledgement messages so as to 
avoid accepting additional data from the one or more data 
sources . 

15. (Original) The method according to claim 12, and 
comprising, after predicting the event, refraining from 
sending subsequent data for storage in the primary storage 
device . 

16. (Currently amended) The method according to claim 12, 
wherein the one or more data sources comprise at least two 
data sources, and comprising, after predicting the event, 
temporarily storing in the disaster-proof storage unit 
only subsequent records associated with data originating 

from a subset of the one e^e — more at least two data 

sources . 

17. (Original) The method according to claim 1, wherein 
temporarily storing the record comprises avoiding 
exceeding a memory capacity in the disaster-proof storage 
unit by matching the memory capacity with at least one of 
a maximum allowed size of data pending for acknowledgement 
by the secondary storage device and a maximum number of 
write commands pending for storage in the secondary 
storage device. 

18. (Original) The method according to claim 1, wherein 
temporarily storing the record comprises including in the 
record additional information related to the data, the 
additional information comprising at least one of an 
address of an originating data source, an address of the 
primary storage device, a time stamp indicating an 
acceptance time of the data and a storage address intended 
for the data in the primary storage device. 

19-21 . (Canceled) 
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22. (Currently amended) A method for data protection, 
comprising : 

accepting data from a data source for storage in a 
primary storage device located at a local site ; 

periodically sending the data for backup in a backup 
storage device located at a remote site by means of a 
sequence of backup operations; 

temporarily storing in a disaster-proof storage unit_^_ 
which is collocated with the primary storage device at the 
local site, records associated with at least part of the 
data that is accepted during a time interval between 
successive backup operations in the sequence; and 

when an event damaging at least some of the data in 
the primary storage device occurs during the time 
interval, reconstructing the data using the records stored 
in the disaster-proof storage unit. 

23. (Currently amended) A method for data protection, 
comprising : 

accepting data for storage from a data source; 

sending the data for storage in a primary storage 
device located at a local site , while mirroring the data 
in a secondary storage device located at a remote site ; 

temporarily storing at least part of the data in a 

disaster-proof storage unit -a^fc a site fefee — primary 

storage — device collocated with the primary storage device 
at the local site ; and 

when an event damaging at least some of the data in 
the primary storage device occurs at the site, 
reconstructing the data using the at least part of the 
data stored in the disaster-proof storage unit. 

24. (Currently amended) A system for data protection, 
comprising : 

one or more data sources, which are arranged to send 
data for storage; 
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primary and secondary storage devices, which are 
located in a local site and a remote site, respectively, 
and are arranged to hold the data; and 

a disaster-proof storage unit adjacent — to the primary 

storage device , which is collocated with the primary 

storage device at the local site and which is arranged to 
temporarily store a record associated with the data while 
awaiting an indication of a successful storage of the data 
in the secondary storage device, and when an event 
damaging at least some of the data in the primary storage 
device occurs, to provide the record so as to enable 
reconstruction of the data using the record stored in the 
disaster-proof storage unit and at least part of the data 
stored in the secondary storage device. 

25. (Currently amended) The system according to claim 24, 
and comprising: 

an environmental sensor, which is arranged to sense 
an environmental condition in a vicinity of the primary 
storage device; and 

a processor, which is arranged to predict the event^ 
prior to occurrence of the event, responsively to the 
sensed environmental condition and, after predicting the 
event, to instruct the disaster-proof storage unit to 
transmit the record using at least one of a wired 
connection and a wireless connection. 

26. (Currently amended) Apparatus for protecting data 
sent for storage in primary and secondary storage devices, 
comprising : 

a disaster-proof storage unit, which is collocated 
with the primary storage device at a local site and which 
comprises : 

a disaster-proof enclosure, which is arranged to 
protect components contained therein against disaster 
events ; 
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a memory device contained in the enclosure, 
which is arranged to temporarily hold a record 
associated with the data while awaiting an indication 
of successful storage of the data in the secondary 
storage device ; and 

a control unit, which is arranged, when an event 
damaging at least some of the data in the primary 
storage device occurs, to provide the record so as to 
enable reconstruction of the data using the record 
stored in the memory device and at least part of the 
data stored in the secondary storage device; 
a sensor, which is arranged to sense an environmental 
condition in a vicinity of the primary storage device; and 
a protection processor, which is arranged to predict 
the event , prior to occurrence of the event, responsively 
to the sensed environmental condition and, responsively to 
predicting the event, to instruct the disaster-proof 
storage unit to transmit the record so as to protect the 
data . 

27. (Original) The apparatus according to claim 26, 
wherein the control unit is arranged to delete the record 
from the memory device responsively to an acknowledgement 
from the secondary storage device acknowledging the 
successful storage of the data in the secondary storage 
device . 

28. (Original) The apparatus according to claim 26, 
wherein the control unit is arranged to communicate with 
the secondary storage device in order to provide the 
record so as to reconstruct the data. 

29. (Original) The apparatus according to claim 26, 
wherein the memory device comprises at least one of a non- 
volatile memory device and a removable memory device. 
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30. (Original) The apparatus according to claim 26, 
wherein the control unit comprises a detection mechanism 
for detecting the event, and wherein the control unit is 
arranged to modify operation of the disaster-proof storage 
unit responsively to detecting the event. 

31. (Original) The apparatus according to claim 30, 
wherein the detection mechanism is arranged to detect at 
least one of a loss of external electrical power supply 
and a communication failure at the disaster-proof storage 
unit . 

32. (Original) The apparatus according to claim 30, 
wherein the disaster-proof storage unit further comprises 
a wireless transmitter, which is arranged to transmit the 
record from the disaster-proof storage unit responsively 
to detecting the event. 

33. (Original) The apparatus according to claim 32, 
wherein the disaster-proof storage unit is one of two or 
more disaster-proof storage units, which are arranged to 
transmit respectively two or more different parts of the 
record over respective wireless links so as to shorten a 
transmission time of the record. 

34. (Original) The apparatus according to claim 30, 
wherein the disaster-proof storage unit further comprises 
a homing device, which is arranged to transmit a homing 
signal from the disaster-proof storage unit responsively 
to detecting the event, so as to enable location and 
retrieval of the disaster-proof storage unit. 

35. (Original) The apparatus according to claim 26, 
wherein the record comprises additional information 
related to the data, the additional information comprising 
at least one of an address of an originating data source, 
an address of the primary storage device, a time stamp 
indicating an acceptance time of the data and a storage 
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address intended for the data in the primary storage 
device . 

36. (Original) The apparatus according to claim 26, 
wherein the sensor is arranged to accept a manual 
indication from a user so as to predict the event. 

37. (Original) The apparatus according to claim 26, 
wherein the data is accepted from one or more data 
sources, and wherein the protection processor is arranged 
to send an acknowledgement message responsively to a 
successful storage of the record in the disaster-proof 
storage unit and to refrain from sending subsequent 
acknowledgement messages after predicting the event so at 
to avoid accepting additional data from the one or more 
data sources. 

38. (Original) The apparatus according to claim 26, 
wherein the data is accepted from one or more data 
sources, and wherein the protection processor is arranged 
to control a rate of the data accepted from the one or 
more data sources after predicting the event. 

39. (Currently amended) The apparatus according to claim 
26, wherein the data is accepted from one — e^e — more at least 
two data sources, and wherein the protection processor is 
arranged to send for temporary storage in the disaster- 
proof storage unit only subsequent records associated with 
data originating from a subset of the ef*e — or more at least 
two data sources after predicting the event. 

40. (Original) The apparatus according to claim 26, 
wherein a capacity of the memory device is matched to a 
maximum allowed size of data pending for acknowledgement 
by the secondary storage device so as to avoid exceeding 
the memory capacity. 
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41. (Currently amended) A computer software product for 
data protection, the product comprising a computer- 
readable medium, in which program instructions are stored, 
which instructions, when read by a computer, cause the 
computer to accept data from one or more data sources sent 
for storage in primary and secondary storage devices, 
which are located respectively in a local site and a 
remote site, and to temporarily store a record associated 
with the data in a disaster-proof storage unit ad j accnt — to- 
collocated with the primary storage device at the local 
site , while awaiting an indication of successful storage 
of the data in the secondary storage device. 
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